Question

During a privileged session, what exact mechanism does the system use to prevent a user from executing forbidden commands, such as deleting system logs, without human intervention?

Accepted Answer

The system uses a security mechanism called an Access Control List, or ACL for short. Think of an ACL like a guest list at a private club that says exactly who is allowed to enter which room. This list is attached to every single file or command on the computer. When you try to do something, the system checks this list to see if your account has permission for that specific action. If your name is not on the list for that file, the system blocks you immediately. For even tighter control, systems use something called Mandatory Access Control. This is like a strict rulebook from the boss that overrides your personal choices. Even if you are an administrator with high-level powers, the system constantly checks your actions against these built-in security policies. If the policy says you cannot touch a log file, the system simply refuses to run the command, no matter who you are.

During a privileged session, what exact mechanism does the system use to prevent a user from executing forbidden commands, such as deleting system logs, without human intervention?

The system uses a security mechanism called an Access Control List, or ACL for short. Think of an ACL like a guest list at a private club that says exactly who is allowed to enter which room. This list is attached to every single file or command on the computer. Whe....

Community Answers

Home → All Courses → Engineering and Technology Courses → CyberArk Training → Flashcard

During a privileged session, what exact mechanism does the system use to prevent a user from executing forbidden commands, such as deleting system logs, without human intervention?

The system uses a security mechanism called an Access Control List, or ACL for short. Think of an ACL like a guest list at a private club that says exactly who is allowed to enter which room. This list is attached to every single file or command on the computer. Whe....

Community Answers